Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99C74526573011F0ADFF34ECDAE4EC9C.roa
File: 99C74526573011F0ADFF34ECDAE4EC9C.roa (raw, json)
Hash identifier: 2zG/Zbf4tVxwCrR6QTnHOB+GV2nYbse1wIWqoi7AnGQ=
Subject key identifier: 72:FC:3E:D7:9B:64:D6:3C:AD:5C:A5:F0:42:CA:AC:09:1A:C0:97:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0189B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99C74526573011F0ADFF34ECDAE4EC9C.roa
Signing time: Wed 02 Jul 2025 10:37:50 +0000
ROA not before: Wed 02 Jul 2025 10:37:45 +0000
ROA not after: Fri 08 Aug 2025 10:37:45 +0000
asID: 14315
IP address blocks: 154.196.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100792 (0x189b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 10:37:45 2025 GMT
Not After : Aug 8 10:37:45 2025 GMT
Subject: CN=68650bfe-a915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:af:df:2b:ec:62:f4:00:8a:21:89:02:f1:
b8:11:4b:1b:63:4a:68:b5:af:ff:68:6a:4c:f0:f6:
6a:25:92:ba:56:38:21:ba:aa:4c:f1:71:6e:7a:85:
d1:48:d8:3e:50:e2:4d:10:40:74:8a:5b:89:e7:39:
45:f9:af:0a:73:1e:8a:f2:c8:0f:89:bb:60:1a:de:
3f:27:fd:d3:e2:e0:ab:59:85:21:96:f3:2f:86:8d:
c3:4a:1b:92:57:0a:7c:52:c3:26:7a:45:4a:84:d6:
1b:d1:a3:3d:f8:b4:e9:c6:20:4e:2f:e8:2d:c9:f9:
f0:1f:cd:1d:3e:27:5a:1b:a1:64:c5:99:07:e9:09:
d7:18:2e:94:9f:25:3f:f8:75:89:73:a4:8c:03:46:
fb:50:6b:a3:2c:c3:85:29:b9:cd:4b:ad:1c:0c:67:
67:1b:2e:71:2d:00:c6:f5:87:86:3c:a8:1a:71:20:
bb:c7:fb:ca:5f:3a:85:07:7e:97:63:67:0a:aa:41:
44:9a:2c:ed:81:50:01:11:86:e0:d7:d9:7c:24:cd:
9e:a1:98:f8:44:05:33:a6:a4:23:8c:f8:30:f8:0b:
e2:de:db:03:30:7b:ad:d4:af:10:68:67:06:c7:86:
d3:c8:77:17:65:bb:2d:ba:b3:03:dc:d9:b5:9b:56:
eb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FC:3E:D7:9B:64:D6:3C:AD:5C:A5:F0:42:CA:AC:09:1A:C0:97:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99C74526573011F0ADFF34ECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.8.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:49:d2:4c:80:2b:77:2d:ba:e6:8d:5b:91:28:81:a1:cc:95:
b4:c3:25:f0:77:87:97:fb:0f:b8:11:15:30:b7:f6:cf:37:d6:
5c:e7:28:47:c2:37:e6:81:c2:a9:d0:2a:be:fd:9e:12:27:d0:
98:16:ef:df:19:e8:30:de:91:9f:52:4f:0e:a2:bf:60:28:f4:
73:0b:78:0f:2e:cf:14:b1:d4:6d:58:ae:d4:63:bf:86:2f:30:
d0:2d:ae:05:0a:3c:32:9c:1d:bd:39:57:9d:3b:df:d0:f8:ee:
03:e9:25:45:c0:c4:ab:80:45:a9:a2:9d:cb:3c:03:19:f9:92:
d0:1a:04:7b:a4:0d:df:1b:cd:3f:7f:75:0f:81:29:5d:96:67:
e5:f3:a0:26:d3:fc:3c:1d:cd:17:40:31:66:2b:1d:d6:2c:b6:
b3:91:85:0f:b8:89:8f:37:ae:8c:9d:3a:48:2b:42:0a:33:0e:
2f:b2:96:b2:16:97:bb:34:eb:be:2b:8b:00:2e:61:6a:48:35:
d0:fd:b5:a0:35:4e:65:d8:f2:95:22:44:1b:58:c5:05:18:a3:
cd:22:0f:7a:1a:b5:b4:4e:e7:12:d0:ba:a3:62:36:aa:85:42:
02:88:7a:4f:34:3f:92:22:b7:bc:55:5d:e6:74:7a:35:8a:ba:
ad:8a:7c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:07:46 2025 by rpki-client